Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/k1bJpYNKhSFeHOiY3S3OgOg4cgU.roa
File: k1bJpYNKhSFeHOiY3S3OgOg4cgU.roa (raw, json)
Hash identifier: jG1Szda7LNqn/uPCRe73b7fZNdyFNRddq7AqToddXcY=
Subject key identifier: 93:56:C9:A5:83:4A:85:21:5E:1C:E8:98:DD:2D:CE:80:E8:38:72:05
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 01907BCF8F027D4265C51FC0A2025FDD32D4
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/k1bJpYNKhSFeHOiY3S3OgOg4cgU.roa
Signing time: Thu 04 Jul 2024 03:35:18 +0000
ROA not before: Thu 04 Jul 2024 03:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136038
IP address blocks: 2.59.152.0/22 maxlen: 22
2.59.155.0/24 maxlen: 24
45.91.226.0/24 maxlen: 24
45.91.227.0/24 maxlen: 24
45.142.152.0/24 maxlen: 24
45.142.155.0/24 maxlen: 24
185.202.103.0/24 maxlen: 24
193.239.150.0/24 maxlen: 24
194.126.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jul 2024 14:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7b:cf:8f:02:7d:42:65:c5:1f:c0:a2:02:5f:dd:32:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Jul 4 03:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9356c9a5834a85215e1ce898dd2dce80e8387205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:ed:8f:ce:cd:eb:87:07:b7:42:d7:b1:35:
2d:fd:19:13:39:25:1a:8d:a2:ff:80:ed:2e:a9:5b:
81:24:ce:23:ce:ce:57:4d:df:32:93:19:79:b3:f0:
59:bc:9f:bb:9c:06:47:6e:9f:77:9f:19:1c:5e:15:
5d:81:56:b9:3d:c7:d1:eb:55:ee:0f:2c:52:22:37:
d4:2b:ec:c5:d8:00:03:52:29:57:5a:56:d6:e9:e9:
b3:24:7e:fd:5b:c2:59:f7:a7:b9:b8:5e:4c:6f:d0:
87:15:cd:f3:82:79:9f:54:06:da:8c:6e:76:70:ed:
a2:5f:91:ff:8f:e6:20:0c:9c:f1:60:e7:26:70:d3:
13:1e:b4:a8:55:2f:93:4a:4d:bc:d4:cf:29:b8:5b:
c0:e3:8c:a5:2a:f5:2c:dc:fb:6f:76:16:b2:09:7c:
a5:44:7c:93:43:4a:a6:96:42:2c:99:7f:e4:ff:47:
94:2d:b8:4e:d9:c7:0d:45:a8:24:ea:0f:c7:c5:ee:
a0:49:07:df:be:38:82:c9:25:37:6d:ea:90:12:18:
bf:04:3b:8d:63:9a:a5:8f:8d:0a:7e:25:a4:ee:1e:
5f:d0:28:1d:3a:7c:16:67:03:96:7d:a0:6d:c2:e7:
9f:cf:95:4f:0c:ef:57:28:4c:fa:51:62:09:68:4f:
07:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:56:C9:A5:83:4A:85:21:5E:1C:E8:98:DD:2D:CE:80:E8:38:72:05
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/k1bJpYNKhSFeHOiY3S3OgOg4cgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.152.0/22
45.91.226.0/23
45.142.152.0/24
45.142.155.0/24
185.202.103.0/24
193.239.150.0/24
194.126.202.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:5f:76:47:89:b7:bd:df:ff:05:fa:49:1c:75:7e:50:24:08:
0f:5a:3f:c8:b2:9f:87:86:be:bb:bf:48:53:af:ad:63:79:22:
d0:ce:73:a8:6f:25:d8:3f:03:ae:7f:75:43:6b:6c:3f:d8:ff:
05:b9:1e:ae:42:d9:0b:cc:f6:93:e4:27:6f:53:03:ce:70:87:
17:bd:83:37:0b:a9:a1:ca:a1:2d:75:18:d4:76:9e:6a:b7:55:
e2:b7:67:3e:cc:a5:bb:66:e6:a1:ba:1b:80:26:71:75:58:f4:
fb:1c:a6:8b:58:16:c2:b0:0b:36:27:cb:7a:41:a4:0c:62:31:
ba:c3:81:25:07:81:4a:44:8e:da:89:9c:f4:27:77:3a:3a:b4:
bb:80:74:09:4e:1c:dc:37:f8:ff:44:8a:40:7c:84:c8:62:49:
57:f6:b6:ea:d9:16:ff:61:16:9a:83:72:59:57:04:b0:41:26:
e7:2f:be:0d:6b:d5:40:c6:e1:79:5a:46:7c:c7:60:42:7c:ba:
da:7e:3a:66:4a:7a:03:fc:6b:0b:d3:5a:6d:f5:5d:e4:92:44:
ea:97:df:3e:16:ca:25:27:67:c5:4f:ce:84:5f:63:a3:c0:54:
a7:6b:d9:be:b1:35:81:d0:de:12:d5:36:3b:9e:12:83:02:58:
22:ad:e7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 18:31:51 2024 by rpki-client on console-ams.rpki-client.org